Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6CSj2yxNriXGjROmVFKwva4nz4E.roa
File: 6CSj2yxNriXGjROmVFKwva4nz4E.roa (raw, json)
Hash identifier: DAzXS/edE8059joW0DNp1Aq9jfJ2h3SPJetNBjIWS2k=
Subject key identifier: E8:24:A3:DB:2C:4D:AE:25:C6:8D:13:A6:54:52:B0:BD:AE:27:CF:81
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019635285D3270CEAD3D22B636A934122995
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6CSj2yxNriXGjROmVFKwva4nz4E.roa
Signing time: Mon 14 Apr 2025 16:35:59 +0000
ROA not before: Mon 14 Apr 2025 16:35:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a06:a600::/29 maxlen: 29
2a06:b5c0::/29 maxlen: 29
2a06:bf40::/29 maxlen: 29
2a0a:2d06:acab::/48 maxlen: 48
2a0e:1a84::/32 maxlen: 32
2a0e:f600:5f::/48 maxlen: 48
2a0f:1e84:20::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a10:67c2:1::/48 maxlen: 48
2a13:2b40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:35:28:5d:32:70:ce:ad:3d:22:b6:36:a9:34:12:29:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 14 16:35:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e824a3db2c4dae25c68d13a65452b0bdae27cf81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fa:ba:d4:96:0f:6a:43:f5:9b:ed:0b:26:77:
ba:fd:a1:48:6d:a2:9d:79:a9:be:46:5b:3e:dd:bf:
93:9d:39:64:71:c2:f9:0f:3e:89:1b:bb:37:d9:23:
8d:91:4c:a2:20:05:16:dc:50:40:0b:d5:76:f7:1f:
66:08:bb:35:82:70:e7:7f:da:36:d5:13:27:16:6b:
ef:12:4c:34:8b:46:de:0f:98:c1:08:00:71:b4:53:
b9:9c:e1:97:e9:41:23:d9:4b:16:f0:65:c6:86:83:
a9:0e:48:b4:cd:91:14:75:d5:39:5d:9d:ef:0b:20:
b0:46:23:c2:81:1a:ff:c2:bb:9c:3c:2c:61:3a:21:
45:da:df:7d:71:2f:1a:9f:9e:6e:c7:4b:3d:b8:7b:
ca:f6:bf:20:48:12:6e:cf:81:8d:f5:cd:5c:0e:58:
c0:9a:aa:57:35:73:06:6e:c0:17:98:35:2e:44:b5:
1b:36:0e:47:53:3e:cb:56:c9:92:47:7b:64:c7:49:
6d:27:76:08:a4:5f:d8:44:05:13:c2:d6:6b:96:bd:
c7:24:ff:d0:71:d3:b4:41:ec:27:b7:0b:e6:2c:63:
0a:87:0b:3b:b4:e6:6f:fd:8e:ea:d9:67:24:a5:cc:
a2:03:58:6f:ac:1b:86:50:4f:0f:b1:6e:c1:d3:27:
58:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:24:A3:DB:2C:4D:AE:25:C6:8D:13:A6:54:52:B0:BD:AE:27:CF:81
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6CSj2yxNriXGjROmVFKwva4nz4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a600::/29
2a06:b5c0::/29
2a06:bf40::/29
2a0a:2d06:acab::/48
2a0e:1a84::/32
2a0e:f600:5f::/48
2a0f:1e84:20::/48
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a10:67c2:1::/48
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
9e:cb:a8:2f:a5:47:10:da:ac:f5:ac:4e:d0:25:5e:f4:15:b5:
d0:38:1a:33:42:1c:87:87:41:d1:44:1c:03:11:a1:5f:2a:cc:
1e:2d:d0:bb:21:04:5a:3d:ca:c9:b1:03:97:4d:07:7c:f9:f4:
47:26:eb:64:80:79:08:2a:dc:10:f8:23:4f:59:98:c2:41:4b:
e7:d4:9c:1a:38:b0:54:ed:4d:08:6e:14:04:e2:b4:78:9f:72:
d7:56:2b:f1:b1:37:eb:03:01:aa:66:ff:98:79:d8:09:fd:80:
06:57:9a:45:68:04:f8:2f:b4:5e:10:89:ff:3b:ec:1e:98:23:
60:0d:0a:4f:a2:e6:da:51:f8:d8:bc:ad:4c:04:93:b8:d1:50:
96:79:6d:78:ac:c4:18:f9:60:f8:a2:4c:15:aa:80:3d:d5:e9:
56:27:51:32:75:82:e2:c2:9d:b6:a9:1c:8f:af:04:ec:9a:4f:
51:a9:5a:c5:01:b9:08:a5:45:fd:a0:c5:2b:19:3c:46:bc:1b:
f8:57:5f:0f:83:81:76:8c:ce:87:b0:cf:30:fd:29:c1:96:17:
20:80:fc:5e:14:c8:2d:33:5d:25:5c:81:74:25:b6:58:a5:4c:
12:80:05:b3:f4:4d:33:02:c2:47:a8:82:ec:71:40:3a:72:ee:
8e:29:b8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:10 2025 by rpki-client